PLUG Security TEST Team: Elance Alert

[Lisa Kachold]

They probably just traded pr0n on IRC too; never looking at a record.

Laugh!

On 7/18/09, David Munson <david.munson at gmail.com> wrote:
> Nobody seems to know yet how many records were compromised, judging from
> what I can find online.
>
> At least it's not like the UC San Diego Cancer Center breach... 30,000
> people notified about a hack that gave access to names & addresses, date of
> birth, and medical records.
> http://datalossdb.org/incidents/2187-30-000-notified-about-names-birth-dates-and-diagnosis-and-treatment-dates-on-hacked-server
>
> On Sat, Jul 18, 2009 at 9:31 AM, Lisa Kachold
> <lisakachold at obnosis.com>wrote:
>
>> NOTE: To HackFesters, Elance is not a FLAG:
>>
>> ---------- Forwarded message ----------
>> From: Elance Trust and Safety <no-reply at elance.com>
>> Date: Fri, 17 Jul 2009 19:39:59 -0500
>> Subject: Elance Alert
>> To: <snip>
>>
>> To ensure you receive future emails, please add
>> reply at announce.elance.com to your Safe Sender list.
>> View as a Web Page:
>>
>> http://view.announce.elance.com/?j=fe8a1d747c64077476&m=feef10797c6d05&ls=fe0410737761017974147274&l=fe9a16717664077b73&s=fe2d10707066057b731678&jb=ffcf14&ju=
>>
>> Dear obnosis,
>>
>> We recently learned that certain Elance user information was accessed
>> without authorization, including potentially yours. The data accessed
>> was contact information -- specifically name, email address, telephone
>> number, city location and Elance login information (passwords were
>> protected with encryption). This incident did NOT involve any credit
>> card, bank account, social security or tax ID numbers.
>>
>> We have remedied the cause of the breach and are working with
>> appropriate authorities. We have also implemented additional security
>> measures and have strengthened password requirements to protect all of
>> our users.
>>
>> We sincerely regret any inconvenience or disruption this may cause.
>>
>> If you have any unanswered questions and for ongoing information about
>> this matter, please visit this page in our Trust & Safety center:
>> http://www.elance.com/p/trust/account_security.html
>>
>> For information on re-setting your password, visit:
>> http://help.elance.com/forums/30969/entries/47262
>>
>> Thank you for your understanding,
>>
>> Michael Culver
>> Vice President
>> Elance----------------------------------------
>>
>>                     This email was sent to:  lisakachold at obnosis.com
>> ( obnosis )
>>                     Your username is included to show this message
>> originated from Elance.
>>
>>                      We respect your right to privacy - visit the
>> following URL to view our policy.
>>        ( http://www.elance.com/p/help/tos/index.html#privacy )
>>
>>        This email was sent by:
>>        Elance, Inc.
>>        441 Logue Avenue, Suite 150
>>        Mountain View, CA, 94043-4020, USA
>>
>>        ----------------------------------------
>>
>>        Visit the following URL to manage your subscriptions.
>>        (
>> http://click.announce.elance.com/subscription_center.aspx?s=fe2d10707066057b731678&j=fe8a1d747c64077476&mid=feef10797c6d05&l=fe9a16717664077b73&jb=ffcf14
>> )
>>
>>        Visit the following URL to update your profile.
>>        (
>> http://click.announce.elance.com/profile_center.aspx?s=fe2d10707066057b731678&mid=feef10797c6d05&j=fe8a1d747c64077476&l=fe9a16717664077b73&jb=ffcf14
>> )
>>
>>        Visit the following URL to unsubscribe.
>>        (
>> http://click.announce.elance.com/unsub_center.aspx?s=fe2d10707066057b731678&j=fe8a1d747c64077476&mid=feef10797c6d05&lid=fe9a16717664077b73&jb=ffcf14
>> )
>>
>>
>>
>> --
>> http://linuxgazette.net/164/kachold.html
>> (623)239-3392 Skype: obn0sis
>> (503)754-4452 www.obnosis.com
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>
>


-- 
http://linuxgazette.net/164/kachold.html
(623)239-3392
(503)754-4452 www.obnosis.com